Abstract: Systems and methods are disclosed for identifying business transactions from traffic in an enterprise content management system. The system intercepts HTTP messages that originate from or are destined for a server in an enterprise content management (ECM) system. The system also receives notifications related to lifecycle events in the ECM system. The system then correlates information in the HTTP messages and the notifications to identify a corresponding business transaction performed by the ECM system.